6.2 Implement BYOD and Guest 300-430 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company wants to deploy a guest Wi-Fi with ISE self-registration. The compliance team requires that guests agree to an acceptable use policy (AUP) and that the guest's device MAC address be recorded for auditing. The WLC is configured for Central Web Authentication. Which ISE configuration is necessary to meet both requirements?

   • AConfigure the WLC to send syslog messages with the MAC address to ISE.
   • BEnable MAC authentication bypass and use the MAC address as the guest username.
   • CUse a sponsored guest portal and have the sponsor manually record the MAC address.
   • DEnable the AUP on the self-registration portal and configure ISE to log the MAC address from the RADIUS accounting messages.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A hotel offers guest Wi-Fi. They want guests to self-register with a username and password, and then be able to access the internet. The hotel uses ISE with Central Web Authentication. After a guest self-registers, what happens on the next connection attempt?

   • AThe guest is authenticated against the ISE internal database and receives the appropriate authorization policy.
   • BThe guest is redirected to the sponsor portal to request approval.
   • CThe guest is automatically placed into a quarantine VLAN without authentication.
   • DThe guest is redirected to the portal again and must re-register.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company uses Central Web Authentication with ISE for guest access. The WLC's web authentication page is served over HTTPS. Users report browser security warnings when they are redirected to the login page. What should you do to resolve this?

   • ADisable HTTPS on the WLC and use HTTP for the redirect.
   • BInstall a certificate signed by a public CA on the WLC for the virtual IP address.
   • CInstall the ISE certificate on the WLC.
   • DChange the redirect ACL to allow HTTP traffic only.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is typically included in a native supplicant provisioning profile pushed by ISE?

   • AThe client's MAC address and IP address
   • BThe SSID and 802.1X credentials
   • CThe WLC's IP address and SNMP community string
   • DThe RADIUS server's shared secret
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of ISE's native supplicant provisioning for wireless clients?

   • ATo provide a web-based login page for client authentication.
   • BTo install a third-party supplicant application on the client.
   • CTo automatically configure the client's operating system supplicant with the correct 802.1X settings and certificates.
   • DTo configure the WLC's internal supplicant for client authentication.
   Reveal Solution Discussion Select an answer first